Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/zHLxyPTzKswXOwfY2u45ulThwXg.roa
File: zHLxyPTzKswXOwfY2u45ulThwXg.roa (raw, json)
Hash identifier: 4AKGVWuITdVpfHMAM5CgVKnpVf0dVINzSc1kHa949qg=
Subject key identifier: CC:72:F1:C8:F4:F3:2A:CC:17:3B:07:D8:DA:EE:39:BA:54:E1:C1:78
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1DA6
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/zHLxyPTzKswXOwfY2u45ulThwXg.roa
Signing time: Fri 01 Sep 2023 10:15:06 +0000
ROA not before: Fri 01 Sep 2023 10:15:06 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 4662
IP address blocks: 61.56.160.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7590 (0x1da6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:15:06 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=CC72F1C8F4F32ACC173B07D8DAEE39BA54E1C178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:db:51:e1:f0:3b:da:8e:a2:8a:37:e9:6b:7c:
e4:e3:2f:ec:dc:d5:fd:94:2c:86:ba:8b:15:4c:5f:
96:e6:0a:46:a3:30:67:d5:c6:01:91:5a:3f:15:8d:
2d:a3:8c:c7:1f:95:04:9a:86:e7:d7:fc:12:f4:76:
e4:1f:64:7a:5f:7e:bf:17:c0:8f:c1:7c:e2:77:14:
2e:70:f0:d8:0e:bf:69:cd:14:5d:16:25:03:19:b5:
58:e9:98:13:45:04:3e:f1:d8:c3:32:b4:57:e7:22:
17:f8:04:fa:77:66:f6:1f:82:47:45:21:2c:8e:69:
b3:ff:55:c5:9a:02:ec:da:5c:24:7f:b8:e7:1a:2d:
93:13:3b:7c:ec:4b:3e:c5:f6:51:4e:a4:75:20:03:
f9:50:24:2b:73:31:be:4d:ff:64:61:79:2f:47:56:
04:e0:39:dc:61:d4:06:f3:d1:3b:48:5f:8b:23:7c:
cb:90:ad:b0:ca:b9:f4:11:1e:87:5c:f7:64:8d:f8:
61:9d:61:65:b4:15:75:2d:eb:ec:6f:c0:58:dc:e5:
90:7d:f9:1c:90:fc:a8:9c:0e:e9:5a:ef:e3:a1:05:
1d:7e:04:9c:a4:93:f5:26:1b:4d:bd:a5:d0:1d:42:
e9:34:63:51:aa:df:4c:b0:3c:dd:2f:f7:71:81:9d:
58:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:72:F1:C8:F4:F3:2A:CC:17:3B:07:D8:DA:EE:39:BA:54:E1:C1:78
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/zHLxyPTzKswXOwfY2u45ulThwXg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.56.160.0/19
Signature Algorithm: sha256WithRSAEncryption
65:26:d5:a2:b1:59:ea:fb:04:e8:e1:98:15:91:83:a9:ca:50:
ab:18:0a:cd:85:bb:9d:b8:d9:4b:06:07:13:01:0d:dd:63:c8:
20:1e:26:62:3f:d4:b9:02:83:5c:96:a4:e5:e8:23:5b:15:95:
63:b6:63:a6:77:72:33:60:94:28:e4:dd:91:70:e3:5b:92:98:
ff:5a:17:4c:dc:03:be:33:ea:84:71:28:ca:ca:94:2e:f0:fd:
49:cc:12:fb:10:e2:8b:c2:12:d9:e3:8e:34:e4:df:6b:e7:ad:
f7:df:50:0f:4e:b9:a1:84:44:5d:4c:54:cc:36:09:13:7f:3a:
b9:12:41:3e:05:5f:2b:95:eb:58:86:be:cd:1e:a8:0a:08:fc:
a2:6c:12:9d:cd:c4:1a:97:08:cc:6a:6d:8a:59:02:23:52:57:
9b:eb:f2:92:13:ec:e0:9b:82:01:dd:fe:fe:d6:7e:76:a5:7d:
96:df:b8:a3:e8:36:4a:b5:5f:81:bc:09:d2:d7:8a:3c:d1:6e:
ff:b6:4d:3f:f4:a1:49:4b:0e:27:06:9c:0b:5a:a3:74:37:53:
5e:fe:30:88:9f:1f:8f:4e:c3:63:44:45:f2:d8:69:7c:62:a1:
44:92:6d:e1:17:47:f0:9b:1f:a9:08:f4:8d:6a:5f:cb:41:42:
06:27:17:3d
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHaYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx
MDE1MDZaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKENDNzJGMUM4RjRGMzJB
Q0MxNzNCMDdEOERBRUUzOUJBNTRFMUMxNzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDj21Hh8DvajqKKN+lrfOTjL+zc1f2ULIa6ixVMX5bmCkajMGfV
xgGRWj8VjS2jjMcflQSahufX/BL0duQfZHpffr8XwI/BfOJ3FC5w8NgOv2nNFF0W
JQMZtVjpmBNFBD7x2MMytFfnIhf4BPp3ZvYfgkdFISyOabP/VcWaAuzaXCR/uOca
LZMTO3zsSz7F9lFOpHUgA/lQJCtzMb5N/2RheS9HVgTgOdxh1Abz0TtIX4sjfMuQ
rbDKufQRHodc92SN+GGdYWW0FXUt6+xvwFjc5ZB9+RyQ/KicDula7+OhBR1+BJyk
k/UmG029pdAdQuk0Y1Gq30ywPN0v93GBnViFAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUzHLxyPTzKswXOwfY2u45ulThwXgwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3pITHh5UFR6S3N3WE93Zlky
dTQ1dWxUaHdYZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAU9
OKAwDQYJKoZIhvcNAQELBQADggEBAGUm1aKxWer7BOjhmBWRg6nKUKsYCs2Fu524
2UsGBxMBDd1jyCAeJmI/1LkCg1yWpOXoI1sVlWO2Y6Z3cjNglCjk3ZFw41uSmP9a
F0zcA74z6oRxKMrKlC7w/UnMEvsQ4ovCEtnjjjTk32vnrfffUA9OuaGERF1MVMw2
CRN/OrkSQT4FXyuV61iGvs0eqAoI/KJsEp3NxBqXCMxqbYpZAiNSV5vr8pIT7OCb
ggHd/v7WfnalfZbfuKPoNkq1X4G8CdLXijzRbv+2TT/0oUlLDicGnAtao3Q3U17+
MIifH49Ow2NERfLYaXxioUSSbeEXR/CbH6kI9I1qX8tBQgYnFz0=
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:28 2024 by rpki-client on console-fra.rpki-client.org